diff --git a/.gitignore b/.gitignore index 166cf9154..95c761c5f 100644 --- a/.gitignore +++ b/.gitignore @@ -2,7 +2,7 @@ SOURCES/centossecureboot201.cer SOURCES/centossecurebootca2.cer SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -SOURCES/linux-4.18.0-553.109.1.el8_10.tar.xz +SOURCES/linux-4.18.0-553.110.1.el8_10.tar.xz SOURCES/redhatsecureboot302.cer SOURCES/redhatsecureboot303.cer SOURCES/redhatsecureboot501.cer diff --git a/.kernel.metadata b/.kernel.metadata index 34ee42e92..f1471f173 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,8 +1,8 @@ 2ba40bf9138b48311e5aa1b737b7f0a8ad66066f SOURCES/centossecureboot201.cer bfdb3d7cffc43f579655af5155d50c08671d95e5 SOURCES/centossecurebootca2.cer -c5587e7f2ecec4b70d867ac161e55657872dadc6 SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 -c25ec8b7459bbd7fc6e467284b50ed85e47b1fc5 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -10803f5a1c37b549744d124978657c8d6c8b906c SOURCES/linux-4.18.0-553.109.1.el8_10.tar.xz +e408b498dbd6b4770fd08c166cce629cc570d423 SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 +59b91541ad93bd7ac0a7d902e2c621d95aa5bd42 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 +7648bebdc5a2bd2b0b4d5125b7e5bc1c51a4afad SOURCES/linux-4.18.0-553.110.1.el8_10.tar.xz 13e5cd3f856b472fde80a4deb75f4c18dfb5b255 SOURCES/redhatsecureboot302.cer e89890ca0ded2f9058651cc5fa838b78db2e6cc2 SOURCES/redhatsecureboot303.cer ba0b760e594ff668ee72ae348adf3e49b97f75fb SOURCES/redhatsecureboot501.cer diff --git a/SOURCES/almalinuxsecureboot0.cer b/SOURCES/almalinuxsecureboot0.cer new file mode 100644 index 000000000..e6bb9db45 Binary files /dev/null and b/SOURCES/almalinuxsecureboot0.cer differ diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index dfeba09e9..fd14eec4a 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.109.1.el8_10 +%define pkgrelease 553.110.1.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.109.1%{?dist} +%define specrelease 553.110.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -448,16 +448,10 @@ Source9: x509.genkey %endif Source10: almalinuxsecurebootca0.cer -Source11: almalinuxsecurebootca0.cer - -%define secureboot_ca_0 %{SOURCE10} -%define secureboot_ca_1 %{SOURCE11} -%define secureboot_ca_2 %{SOURCE11} - -%define secureboot_key_0 %{SOURCE10} -%define pesign_name_0 almalinuxsecurebootca0 - - +Source11: almalinuxsecureboot0.cer +%define secureboot_ca_0 %{SOURCE10} +%define secureboot_key_0 %{SOURCE11} +%define pesign_name_0 almalinuxsecureboot0 Source17: mod-blacklist.sh Source18: mod-sign.sh @@ -527,7 +521,6 @@ Source4001: rpminspect.yaml # AlmaLinux Source Source9000: almalinux.pem -Source9001: almalinuxsecurebootca0.cer ## Patches needed for building this package @@ -2718,7 +2711,7 @@ fi # # %changelog -* Mon Mar 02 2026 Andrei Lukoshko - 4.18.0-553.109.1 +* Sun Mar 08 2026 Andrei Lukoshko - 4.18.0-553.110.1 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -2729,10 +2722,17 @@ fi - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained -* Mon Mar 02 2026 Eduard Abdullin - 4.18.0-553.109.1 +* Sun Mar 08 2026 Eduard Abdullin - 4.18.0-553.110.1 - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS +* Thu Feb 26 2026 CKI KWF Bot [4.18.0-553.110.1.el8_10] +- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] +- fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] +- audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] +- fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] +- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} + * Tue Feb 24 2026 CKI KWF Bot [4.18.0-553.109.1.el8_10] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097}